How to block USB in Windows Server 2019 and usb access permission specific users?

Create two GPOs one set to deny read and write for removable media.
Create a second GPO that applies after the deny all that is targeted to a AD group and make sure the GPO settings are User config and not computer config.
 
if we assume these users are remote then yes but a local user can just bypass the GPO if they can actually use the port itself
 
Back
Top